ISO 9004

Quality Management - Guidance for Sustained Success

Guidance for organizations that want to go beyond conformity with ISO 9001 and improve their overall ability to achieve sustained success, including a self-assessment tool for judging maturity.

ISO 10001

Customer Satisfaction - Codes of Conduct

Guidance on planning, designing, implementing and improving customer satisfaction codes of conduct — the promises an organization makes to its customers about how it will behave — as the first line of defence against complaints and disputes.

ISO 10002

Complaints Handling in Organizations

Guidance on handling complaints about products and services inside an organization — from receipt and acknowledgement through investigation, resolution and follow-up, to using complaint data for improvement.

ISO 10003

External Dispute Resolution for Customer Satisfaction

Guidance on resolving product- and service-related complaints that an organization has been unable to settle internally, by using dispute resolution providers external to the organization.

ISO 10004

Monitoring and Measuring Customer Satisfaction

Guidance on defining and implementing processes to monitor and measure customer satisfaction, covering what to measure, how to gather direct and indirect data, and how to analyse and act on the results.

ISO 27000

Information Security Management Systems - Overview and Vocabulary

The overview and vocabulary document for the ISO/IEC 27000 family. It explains how the ISMS standards fit together and defines the terms they use, and is available free of charge from ISO.

ISO 31010

Risk Assessment Techniques

A catalogue of risk assessment techniques with guidance on selecting and applying them. The second edition, IEC 31010:2019, replaces the 2009 edition and complements ISO 31000.

ISO 27001

Information Security Management Systems

The certifiable requirements standard for an information security management system. Current edition is ISO/IEC 27001:2022 with Amendment 1:2024 (climate action); Annex A lists 93 controls organised into four themes.

ISO 27002

Information Security, Cybersecurity and Privacy Protection - Security Controls

The implementation guidance companion to ISO/IEC 27001. It describes 93 information security controls in four themes, each with purpose, guidance and attributes, and is not itself a certifiable standard.

ISO 22301

Business Continuity Management Systems

The certifiable business continuity management system standard. Current edition is ISO 22301:2019 with Amendment 1:2024 (climate action); a revision is in preparation at committee draft stage.

ISO 37301

Compliance Management Systems

Certifiable requirements for a compliance management system, replacing the guidance-only ISO 19600:2014

ISO 42001

Artificial Intelligence Management Systems

The first certifiable AI management system standard (AIMS), specifying requirements for the responsible development, provision and use of AI systems

ISO 20022

Financial Services - Universal Financial Industry Message Scheme

Multi-part standard defining a common modelling methodology, repository and message scheme for financial industry messaging; Part 1 (metamodel) third edition published 2026

ISO 27005

Information Security Risk Management

Guidance on managing information security risks in support of an ISO/IEC 27001 information security management system; guidance only, not certifiable

ISO 27701

Privacy Information Management Systems

Certifiable requirements for a privacy information management system (PIMS); the 2025 second edition is a standalone standard, no longer an extension to ISO/IEC 27001

ISO 27032

Cybersecurity Guidelines for Cyberspace

Guidelines for Internet security, explaining how Internet security relates to network, web and cybersecurity; second edition published 2023, replacing the 2012 cyberspace-focused edition

ISO 22739

Blockchain and DLT - Vocabulary

The international vocabulary for blockchain and distributed ledger technologies; second edition published 2024, replacing ISO 22739:2020

ISO 23257

Blockchain and DLT - Reference Architecture

Reference architecture for blockchain and distributed ledger technology systems, defining concepts, roles, functional components and architectural views

ISO 23894

Artificial Intelligence - Risk Management

Guidance on managing risk specific to artificial intelligence, applying the ISO 31000 risk management model to AI development and use; guidance only, not certifiable

ISO 24028

Artificial Intelligence - Overview of Trustworthiness in AI

A technical report surveying the factors that affect the trustworthiness of systems providing or using AI, including transparency, explainability, controllability, robustness, safety, security and privacy.

ISO 30414

Human Resource Management - Human Capital Reporting and Disclosure

The 2025 second edition of the human capital reporting standard, setting out requirements and recommendations for internal and external human capital reporting and disclosure (HCRD). It replaces the withdrawn ISO 30414:2018.

ISO 9362

Banking - Business Identifier Code (BIC)

Specifies the elements and structure of the business identifier code (BIC), a universal identifier for financial and non-financial institutions used to address messages, route transactions and identify business parties.